@sublay/js 7.7.1 → 7.9.0

package/dist/index.d.ts

@@ -10,6 +10,7 @@ import * as Follows from "./modules/follows";
 import * as Connections from "./modules/connections";
 import * as AppNotifications from "./modules/app-notifications";
 import * as Reports from "./modules/reports";
+import * as Reputation from "./modules/reputation";
 import * as Search from "./modules/search";
 import * as Storage from "./modules/storage";
 import * as OAuth from "./modules/oauth";
@@ -33,6 +34,7 @@ export declare class SublayClient {
     connections: BoundModule<typeof Connections>;
     appNotifications: BoundModule<typeof AppNotifications>;
     reports: BoundModule<typeof Reports>;
+    reputation: BoundModule<typeof Reputation>;
     search: BoundModule<typeof Search>;
     storage: BoundModule<typeof Storage>;
     oauth: BoundModule<typeof OAuth>;
@@ -56,9 +58,13 @@ export type { ClientConfig, AuthTokens } from "./core/client";
 export type { PaginatedResponse, PaginationMetadata, } from "./interfaces/IPaginatedResponse";
 export type { SpaceReputationContextParams, SpaceReputationUserParams, } from "./interfaces/SpaceReputation";
 export type { UserSearchParams } from "./interfaces/UserSearch";
+export type { ReputationGrant, ReputationGrantSourceType, ReputationGrantTargetType, ReputationGrantTargetFilter, GrantSummary, } from "./interfaces/ReputationGrant";
+export type { CreateGrantProps } from "./modules/reputation/createGrant";
+export type { ListGrantsProps, ListGrantsResponse, } from "./modules/reputation/listGrants";
 export type { Workspace, WorkspaceMember, WorkspaceInvitation, WorkspaceCapability, WorkspaceInvitationStatus, WorkspaceAuthorityReason, WorkspaceAuthorityReasonDetail, WorkspaceRosterReason, WorkspaceRosterEntry, WorkspaceRosterResponse, WorkspaceRosterCountsResponse, WorkspaceStandingUser, WorkspaceMemberStanding, WorkspaceAuthority, RemoveWorkspaceMemberFromSubtreeResponse, SkippedWorkspace, } from "./interfaces/Workspace";
 export { PUSH_EVENT_TYPES, MUTE_DURATIONS } from "./interfaces/Push";
-export type { PushEventType, MuteDuration, NotificationPreferences, } from "./interfaces/Push";
+export type { PushEventType, MuteDuration, NotificationPreferences, PushDeviceIdentifier, WebPushSubscription, } from "./interfaces/Push";
+export type { SignOutResult, PushUnbindSkipReason, } from "./modules/auth/signOut";
 export type { UpdateNotificationPreferencesProps } from "./modules/push/updateNotificationPreferences";
 export type { MuteConversationProps, MuteConversationResponse, } from "./modules/chat/muteConversation";
 export type { TableAccessor, TableRow, TableQuery, DbFilter, DbFilterOperator, BulkDeleteProps, DeleteResult, BulkDeleteResult, } from "./interfaces/Table";

package/dist/index.js

@@ -212,13 +212,54 @@ async function signIn(client, data) {
 }
 
 // src/modules/auth/signOut.ts
+var PUSH_UNBIND_STATUS_UNKNOWN_CODE = "auth/push-unbind-status-unknown";
+var UNBIND_FAILURE_CODES = [
+  "auth/device-deregistration-failed",
+  "auth/sign-out-failed"
+];
+function isUnbindFailure(error) {
+  const code = error?.response?.data?.code;
+  return typeof code === "string" && UNBIND_FAILURE_CODES.includes(code);
+}
 async function signOut(client, data) {
   const refreshToken = data?.refreshToken ?? client.getRefreshToken();
-  await client.projectInstance.post(
-    "/auth/sign-out",
-    refreshToken ? { refreshToken } : {}
-  );
+  const localUnbindSkipped = Boolean(data?.pushDevice) && !refreshToken;
+  const body = refreshToken ? { refreshToken } : {};
+  if (data?.pushDevice && !localUnbindSkipped) body.pushDevice = data.pushDevice;
+  let response;
+  try {
+    response = await client.projectInstance.post(
+      "/auth/sign-out",
+      body
+    );
+  } catch (error) {
+    if (isUnbindFailure(error)) throw error;
+    console.warn(
+      "signOut: the server sign-out did not complete, so the session may still be live on the server until its refresh token expires. Signing out locally anyway \u2014 a user must always be able to sign out; only a refused push unbind keeps the local session, because that is the one failure that leaves a binding to retry against.",
+      error
+    );
+  }
   client.clearTokens();
+  const serverUnbindSkipped = typeof response?.data === "object" && response.data !== null && response.data.code === PUSH_UNBIND_STATUS_UNKNOWN_CODE;
+  if (localUnbindSkipped) {
+    console.warn(
+      "signOut: signed out, but the push unbind was SKIPPED \u2014 `pushDevice` was supplied and no refresh token could be resolved (none stored and none provided). The unbind is scoped to the refresh token's subject, so the server would have unbound nothing. This device keeps receiving that account's notifications until something else removes the binding. Pass `refreshToken` alongside `pushDevice` \u2014 required in host-managed mode, where the SDK stores no refresh token."
+    );
+    return {
+      pushUnbindSkipped: true,
+      pushUnbindSkipReason: "no-refresh-token"
+    };
+  }
+  if (serverUnbindSkipped) {
+    console.warn(
+      "signOut: signed out, but the push unbind was SKIPPED \u2014 the server could not determine whether this project has push devices, so it did not attempt one. This device may still be bound to that account and can keep receiving its notifications. The sign-out itself committed, so there is no credential left to retry with: the binding clears when that account next registers on this device, or when the server prunes the token as undeliverable."
+    );
+    return {
+      pushUnbindSkipped: true,
+      pushUnbindSkipReason: "push-unbind-status-unknown"
+    };
+  }
+  return { pushUnbindSkipped: false };
 }
 
 // src/modules/auth/requestNewAccessToken.ts
@@ -266,7 +307,11 @@ async function resetPassword(client, data) {
 async function changePassword(client, data) {
   const response = await client.projectInstance.post(
     "/auth/change-password",
-    data
+    {
+      password: data.password,
+      newPassword: data.newPassword,
+      ...data.pushDevice ? { pushDevice: data.pushDevice } : {}
+    }
   );
   return response.data;
 }
@@ -1933,6 +1978,49 @@ async function fetchModeratedReports(client, data) {
   return response.data;
 }
 
+// src/modules/reputation/index.ts
+var reputation_exports = {};
+__export(reputation_exports, {
+  createGrant: () => createGrant,
+  listGrants: () => listGrants
+});
+
+// src/modules/reputation/createGrant.ts
+async function createGrant(client, data) {
+  const response = await client.projectInstance.post(
+    "/reputation-grants",
+    data
+  );
+  return response.data;
+}
+
+// src/modules/reputation/listGrants.ts
+async function listGrants(client, data) {
+  const {
+    spaceReputation,
+    spaceReputationId,
+    spaceReputationDescendants,
+    ...rest
+  } = data;
+  const response = await client.projectInstance.get(
+    "/reputation-grants",
+    {
+      params: {
+        ...rest,
+        // `spaceReputationId=context` scores each hydrated user against THAT
+        // GRANT'S own bucket. Normalized rather than spread raw — axios would
+        // bracket-encode the object and the server would ignore it.
+        ...buildSpaceReputationParams({
+          spaceReputation,
+          spaceReputationId,
+          spaceReputationDescendants
+        })
+      }
+    }
+  );
+  return response.data;
+}
+
 // src/modules/search/index.ts
 var search_exports = {};
 __export(search_exports, {
@@ -2553,11 +2641,9 @@ __export(workspaces_exports, {
 
 // src/modules/workspaces/createWorkspace.ts
 async function createWorkspace(client, data) {
-  const body = { ...data };
-  delete body.userId;
   const response = await client.projectInstance.post(
     "/workspaces",
-    body
+    data
   );
   return response.data;
 }
@@ -2574,17 +2660,13 @@ async function fetchWorkspace(client, data) {
 
 // src/modules/workspaces/fetchManyWorkspaces.ts
 async function fetchManyWorkspaces(client, data = {}) {
-  const params = { ...data };
-  delete params.userId;
-  const response = await client.projectInstance.get("/workspaces", { params });
+  const response = await client.projectInstance.get("/workspaces", { params: data });
   return response.data;
 }
 
 // src/modules/workspaces/updateWorkspace.ts
 async function updateWorkspace(client, data) {
-  const { workspaceId, ...rest } = data;
-  const body = { ...rest };
-  delete body.userId;
+  const { workspaceId, ...body } = data;
   const response = await client.projectInstance.patch(
     `/workspaces/${workspaceId}`,
     body
@@ -2613,9 +2695,7 @@ async function deleteWorkspace(client, data) {
 
 // src/modules/workspaces/transferWorkspaceOwnership.ts
 async function transferWorkspaceOwnership(client, data) {
-  const { workspaceId, ...rest } = data;
-  const body = { ...rest };
-  delete body.userId;
+  const { workspaceId, ...body } = data;
   const response = await client.projectInstance.post(
     `/workspaces/${workspaceId}/transfer-ownership`,
     body
@@ -2625,9 +2705,7 @@ async function transferWorkspaceOwnership(client, data) {
 
 // src/modules/workspaces/fetchWorkspaceMembers.ts
 async function fetchWorkspaceMembers(client, data) {
-  const { workspaceId, ...rest } = data;
-  const params = { ...rest };
-  delete params.userId;
+  const { workspaceId, ...params } = data;
   const response = await client.projectInstance.get(`/workspaces/${workspaceId}/members`, { params });
   return response.data;
 }
@@ -2643,9 +2721,7 @@ async function fetchWorkspaceMemberStanding(client, data) {
 
 // src/modules/workspaces/updateWorkspaceMember.ts
 async function updateWorkspaceMember(client, data) {
-  const { workspaceId, targetUserId, ...rest } = data;
-  const body = { ...rest };
-  delete body.userId;
+  const { workspaceId, targetUserId, ...body } = data;
   const response = await client.projectInstance.patch(
     `/workspaces/${workspaceId}/members/${targetUserId}`,
     body
@@ -2863,6 +2939,7 @@ var PUSH_EVENT_TYPES = [
   "event-invite",
   "event-updated",
   "event-cancelled",
+  "reputation-grant",
   "message"
 ];
 var MUTE_DURATIONS = ["8h", "24h", "1w", "forever"];
@@ -2881,6 +2958,7 @@ var SublayClient = class _SublayClient {
   connections;
   appNotifications;
   reports;
+  reputation;
   search;
   storage;
   oauth;
@@ -2900,6 +2978,7 @@ var SublayClient = class _SublayClient {
     this.connections = bindModule(connections_exports, this.http);
     this.appNotifications = bindModule(app_notifications_exports, this.http);
     this.reports = bindModule(reports_exports, this.http);
+    this.reputation = bindModule(reputation_exports, this.http);
     this.search = bindModule(search_exports, this.http);
     this.storage = bindModule(storage_exports, this.http);
     this.oauth = bindModule(oauth_exports, this.http);

package/dist/index.mjs

@@ -180,13 +180,54 @@ async function signIn(client, data) {
 }
 
 // src/modules/auth/signOut.ts
+var PUSH_UNBIND_STATUS_UNKNOWN_CODE = "auth/push-unbind-status-unknown";
+var UNBIND_FAILURE_CODES = [
+  "auth/device-deregistration-failed",
+  "auth/sign-out-failed"
+];
+function isUnbindFailure(error) {
+  const code = error?.response?.data?.code;
+  return typeof code === "string" && UNBIND_FAILURE_CODES.includes(code);
+}
 async function signOut(client, data) {
   const refreshToken = data?.refreshToken ?? client.getRefreshToken();
-  await client.projectInstance.post(
-    "/auth/sign-out",
-    refreshToken ? { refreshToken } : {}
-  );
+  const localUnbindSkipped = Boolean(data?.pushDevice) && !refreshToken;
+  const body = refreshToken ? { refreshToken } : {};
+  if (data?.pushDevice && !localUnbindSkipped) body.pushDevice = data.pushDevice;
+  let response;
+  try {
+    response = await client.projectInstance.post(
+      "/auth/sign-out",
+      body
+    );
+  } catch (error) {
+    if (isUnbindFailure(error)) throw error;
+    console.warn(
+      "signOut: the server sign-out did not complete, so the session may still be live on the server until its refresh token expires. Signing out locally anyway \u2014 a user must always be able to sign out; only a refused push unbind keeps the local session, because that is the one failure that leaves a binding to retry against.",
+      error
+    );
+  }
   client.clearTokens();
+  const serverUnbindSkipped = typeof response?.data === "object" && response.data !== null && response.data.code === PUSH_UNBIND_STATUS_UNKNOWN_CODE;
+  if (localUnbindSkipped) {
+    console.warn(
+      "signOut: signed out, but the push unbind was SKIPPED \u2014 `pushDevice` was supplied and no refresh token could be resolved (none stored and none provided). The unbind is scoped to the refresh token's subject, so the server would have unbound nothing. This device keeps receiving that account's notifications until something else removes the binding. Pass `refreshToken` alongside `pushDevice` \u2014 required in host-managed mode, where the SDK stores no refresh token."
+    );
+    return {
+      pushUnbindSkipped: true,
+      pushUnbindSkipReason: "no-refresh-token"
+    };
+  }
+  if (serverUnbindSkipped) {
+    console.warn(
+      "signOut: signed out, but the push unbind was SKIPPED \u2014 the server could not determine whether this project has push devices, so it did not attempt one. This device may still be bound to that account and can keep receiving its notifications. The sign-out itself committed, so there is no credential left to retry with: the binding clears when that account next registers on this device, or when the server prunes the token as undeliverable."
+    );
+    return {
+      pushUnbindSkipped: true,
+      pushUnbindSkipReason: "push-unbind-status-unknown"
+    };
+  }
+  return { pushUnbindSkipped: false };
 }
 
 // src/modules/auth/requestNewAccessToken.ts
@@ -234,7 +275,11 @@ async function resetPassword(client, data) {
 async function changePassword(client, data) {
   const response = await client.projectInstance.post(
     "/auth/change-password",
-    data
+    {
+      password: data.password,
+      newPassword: data.newPassword,
+      ...data.pushDevice ? { pushDevice: data.pushDevice } : {}
+    }
   );
   return response.data;
 }
@@ -1901,6 +1946,49 @@ async function fetchModeratedReports(client, data) {
   return response.data;
 }
 
+// src/modules/reputation/index.ts
+var reputation_exports = {};
+__export(reputation_exports, {
+  createGrant: () => createGrant,
+  listGrants: () => listGrants
+});
+
+// src/modules/reputation/createGrant.ts
+async function createGrant(client, data) {
+  const response = await client.projectInstance.post(
+    "/reputation-grants",
+    data
+  );
+  return response.data;
+}
+
+// src/modules/reputation/listGrants.ts
+async function listGrants(client, data) {
+  const {
+    spaceReputation,
+    spaceReputationId,
+    spaceReputationDescendants,
+    ...rest
+  } = data;
+  const response = await client.projectInstance.get(
+    "/reputation-grants",
+    {
+      params: {
+        ...rest,
+        // `spaceReputationId=context` scores each hydrated user against THAT
+        // GRANT'S own bucket. Normalized rather than spread raw — axios would
+        // bracket-encode the object and the server would ignore it.
+        ...buildSpaceReputationParams({
+          spaceReputation,
+          spaceReputationId,
+          spaceReputationDescendants
+        })
+      }
+    }
+  );
+  return response.data;
+}
+
 // src/modules/search/index.ts
 var search_exports = {};
 __export(search_exports, {
@@ -2521,11 +2609,9 @@ __export(workspaces_exports, {
 
 // src/modules/workspaces/createWorkspace.ts
 async function createWorkspace(client, data) {
-  const body = { ...data };
-  delete body.userId;
   const response = await client.projectInstance.post(
     "/workspaces",
-    body
+    data
   );
   return response.data;
 }
@@ -2542,17 +2628,13 @@ async function fetchWorkspace(client, data) {
 
 // src/modules/workspaces/fetchManyWorkspaces.ts
 async function fetchManyWorkspaces(client, data = {}) {
-  const params = { ...data };
-  delete params.userId;
-  const response = await client.projectInstance.get("/workspaces", { params });
+  const response = await client.projectInstance.get("/workspaces", { params: data });
   return response.data;
 }
 
 // src/modules/workspaces/updateWorkspace.ts
 async function updateWorkspace(client, data) {
-  const { workspaceId, ...rest } = data;
-  const body = { ...rest };
-  delete body.userId;
+  const { workspaceId, ...body } = data;
   const response = await client.projectInstance.patch(
     `/workspaces/${workspaceId}`,
     body
@@ -2581,9 +2663,7 @@ async function deleteWorkspace(client, data) {
 
 // src/modules/workspaces/transferWorkspaceOwnership.ts
 async function transferWorkspaceOwnership(client, data) {
-  const { workspaceId, ...rest } = data;
-  const body = { ...rest };
-  delete body.userId;
+  const { workspaceId, ...body } = data;
   const response = await client.projectInstance.post(
     `/workspaces/${workspaceId}/transfer-ownership`,
     body
@@ -2593,9 +2673,7 @@ async function transferWorkspaceOwnership(client, data) {
 
 // src/modules/workspaces/fetchWorkspaceMembers.ts
 async function fetchWorkspaceMembers(client, data) {
-  const { workspaceId, ...rest } = data;
-  const params = { ...rest };
-  delete params.userId;
+  const { workspaceId, ...params } = data;
   const response = await client.projectInstance.get(`/workspaces/${workspaceId}/members`, { params });
   return response.data;
 }
@@ -2611,9 +2689,7 @@ async function fetchWorkspaceMemberStanding(client, data) {
 
 // src/modules/workspaces/updateWorkspaceMember.ts
 async function updateWorkspaceMember(client, data) {
-  const { workspaceId, targetUserId, ...rest } = data;
-  const body = { ...rest };
-  delete body.userId;
+  const { workspaceId, targetUserId, ...body } = data;
   const response = await client.projectInstance.patch(
     `/workspaces/${workspaceId}/members/${targetUserId}`,
     body
@@ -2831,6 +2907,7 @@ var PUSH_EVENT_TYPES = [
   "event-invite",
   "event-updated",
   "event-cancelled",
+  "reputation-grant",
   "message"
 ];
 var MUTE_DURATIONS = ["8h", "24h", "1w", "forever"];
@@ -2849,6 +2926,7 @@ var SublayClient = class _SublayClient {
   connections;
   appNotifications;
   reports;
+  reputation;
   search;
   storage;
   oauth;
@@ -2868,6 +2946,7 @@ var SublayClient = class _SublayClient {
     this.connections = bindModule(connections_exports, this.http);
     this.appNotifications = bindModule(app_notifications_exports, this.http);
     this.reports = bindModule(reports_exports, this.http);
+    this.reputation = bindModule(reputation_exports, this.http);
     this.search = bindModule(search_exports, this.http);
     this.storage = bindModule(storage_exports, this.http);
     this.oauth = bindModule(oauth_exports, this.http);

package/dist/interfaces/ChatMessage.d.ts

@@ -1,3 +1,4 @@
+import { GrantSummary } from "./ReputationGrant";
 import { GifData } from "./Comment";
 import { File } from "./File";
 import { Mention } from "./Mention";
@@ -17,6 +18,13 @@ export interface ChatMessage {
     threadReplyCount: number;
     reactionCounts: Record<string, number>;
     userReactions: string[];
+    /**
+     * Reputation-grant summary. Opt-in — present exactly when the read requested
+     * `include=grants`. Once requested the server always returns the object,
+     * zero-filled rather than omitted, on projects with no grants and on projects
+     * without the reputation bundle alike.
+     */
+    grants?: GrantSummary;
     editedAt: string | null;
     userDeletedAt: string | null;
     moderationStatus: "approved" | "removed" | null;

package/dist/interfaces/Comment.d.ts

@@ -1,3 +1,4 @@
+import { GrantSummary } from "./ReputationGrant";
 import { Entity } from "./Entity";
 import { Mention } from "./Mention";
 import { User } from "./User";
@@ -28,6 +29,13 @@ export interface Comment {
     reactionCounts: ReactionCounts;
     userReaction?: ReactionType | null;
     repliesCount: number;
+    /**
+     * Reputation-grant summary. Opt-in — present exactly when the read requested
+     * `include=grants`. Once requested the server always returns the object,
+     * zero-filled rather than omitted, on projects with no grants and on projects
+     * without the reputation bundle alike.
+     */
+    grants?: GrantSummary;
     metadata: Record<string, any>;
     createdAt: string;
     updatedAt: string;

package/dist/interfaces/Entity.d.ts

@@ -1,3 +1,4 @@
+import { GrantSummary } from "./ReputationGrant";
 import { Mention } from "./Mention";
 import { User } from "./User";
 import { Space } from "./Space";
@@ -43,6 +44,13 @@ export interface Entity {
     nsfwEffective: boolean;
     topComment: TopComment | null;
     isSaved?: boolean;
+    /**
+     * Reputation-grant summary. Opt-in — present exactly when the read requested
+     * `include=grants`. Once requested the server always returns the object,
+     * zero-filled rather than omitted, on projects with no grants and on projects
+     * without the reputation bundle alike.
+     */
+    grants?: GrantSummary;
     isDraft: boolean | null;
     moderationStatus: "approved" | "removed" | null;
     moderatedAt: string | null;

package/dist/interfaces/Push.d.ts

@@ -4,7 +4,7 @@
  * (server `src/constants/push/pushEvents.ts`); these are the only names a
  * `disabledTypes` set may contain.
  */
-export declare const PUSH_EVENT_TYPES: readonly ["entity-comment", "comment-reply", "entity-mention", "comment-mention", "entity-reaction", "comment-reaction", "entity-reaction-milestone-specific", "entity-reaction-milestone-total", "comment-reaction-milestone-specific", "comment-reaction-milestone-total", "new-follow", "connection-request", "connection-accepted", "space-membership-approved", "event-invite", "event-updated", "event-cancelled", "message"];
+export declare const PUSH_EVENT_TYPES: readonly ["entity-comment", "comment-reply", "entity-mention", "comment-mention", "entity-reaction", "comment-reaction", "entity-reaction-milestone-specific", "entity-reaction-milestone-total", "comment-reaction-milestone-specific", "comment-reaction-milestone-total", "new-follow", "connection-request", "connection-accepted", "space-membership-approved", "event-invite", "event-updated", "event-cancelled", "reputation-grant", "message"];
 export type PushEventType = (typeof PUSH_EVENT_TYPES)[number];
 /**
  * The four conversation-mute duration choices. Send the CHOICE, never a raw
@@ -18,3 +18,57 @@ export type MuteDuration = (typeof MUTE_DURATIONS)[number];
 export interface NotificationPreferences {
     disabledTypes: PushEventType[];
 }
+/**
+ * A Web Push subscription in its SERIALIZED form — the JSON the server reads,
+ * not the live browser object.
+ *
+ * A `PushSubscription` straight from `PushManager.subscribe()` does NOT satisfy
+ * this type. It exposes its keys only through `getKey(name)`; there is no `keys`
+ * property to read, so it is not assignable here under strict TypeScript, and
+ * passing one through a cast sends a body the server rejects.
+ *
+ * To produce a value of this type:
+ *
+ * 1. **Serialize** the subscription with `subscription.toJSON()`.
+ * 2. **Confirm** `endpoint`, `keys.p256dh` and `keys.auth` are all present —
+ *    `PushSubscriptionJSON` types every one of them as optional, while the
+ *    server requires all three as non-empty strings and 400s otherwise.
+ *
+ * ```ts
+ * const json = subscription.toJSON();
+ * if (!json.endpoint || !json.keys?.p256dh || !json.keys?.auth) {
+ *   throw new Error("Incomplete Web Push subscription");
+ * }
+ * const webPushSubscription: WebPushSubscription = {
+ *   endpoint: json.endpoint,
+ *   keys: { p256dh: json.keys.p256dh, auth: json.keys.auth },
+ * };
+ * ```
+ *
+ * Mirrors the server's `webPushSubscriptionSchema`
+ * (server `src/v7/validation/push-notifications/push-notifications.schema.ts`).
+ */
+export interface WebPushSubscription {
+    endpoint: string;
+    keys: {
+        p256dh: string;
+        auth: string;
+    };
+}
+/**
+ * Identifies one physical device. Mirrors the server's device-identifier body
+ * exactly (server `src/v7/validation/push-notifications/push-notifications.schema.ts`):
+ * a provider token for `ios`/`android`, a Web Push subscription for `web`. The
+ * union encodes the server's own cross-check — it rejects the same
+ * combinations the server's `superRefine` rejects.
+ *
+ * Passed to `auth.signOut` to unbind that device's push binding in the same
+ * transaction as the sign-out.
+ */
+export type PushDeviceIdentifier = {
+    platform: "ios" | "android";
+    token: string;
+} | {
+    platform: "web";
+    subscription: WebPushSubscription;
+};

package/dist/interfaces/ReputationGrant.d.ts

@@ -0,0 +1,85 @@
+import { User } from "./User";
+/** The three grantable target kinds. Polymorphic — `targetId` carries no FK. */
+export type ReputationGrantTargetType = "entity" | "comment" | "chat-message";
+/**
+ * Who created the grant. `"user"` is a debited transfer (reputation moved out
+ * of `senderId`'s bucket); `"app"` is a mint issued by the project itself with
+ * a null `senderId`. Persisted rather than inferred from `senderId`, which is
+ * also null for a transfer whose sender was later deleted.
+ */
+export type ReputationGrantSourceType = "user" | "app";
+/**
+ * The "which item was rewarded" pair, as a both-or-neither union.
+ *
+ * Modelled as a two-branch union rather than two independent optional fields so
+ * a half-filled target — `{ targetType }` with no `targetId`, or the reverse —
+ * does not compile. The server answers that shape with
+ * `400 reputation-grant/invalid-body` on the write (a shared
+ * `bothOrNeitherTarget` refinement) and
+ * `400 reputation-grant/invalid-filter` on the list, so the union turns a
+ * guaranteed round trip into a red squiggle.
+ *
+ * The empty branch is `?: undefined`, NOT `?: null` — deliberately, and for the
+ * same reason `metadata` is not nullable: `grantBodyFields.targetType` is
+ * `.optional()` with no `.nullable()`, so an explicit `targetType: null` is
+ * rejected. Omit both keys to mean "no target".
+ *
+ * Building the pair conditionally needs one accommodation: an inline
+ * conditional spread of just these two keys widens both to `T | undefined` and
+ * then matches neither branch. Either branch the whole argument, or name this
+ * type on a helper and spread that:
+ *
+ * ```ts
+ * const target: ReputationGrantTargetFilter = item
+ *   ? { targetType: "entity", targetId: item.id }
+ *   : {};
+ * await listGrants(client, { ...base, ...target });
+ * ```
+ */
+export type ReputationGrantTargetFilter = {
+    /** The kind of item rewarded. Requires `targetId` alongside it. */
+    targetType: ReputationGrantTargetType;
+    /** The rewarded item's id. Requires `targetType` alongside it. */
+    targetId: string;
+} | {
+    targetType?: undefined;
+    targetId?: undefined;
+};
+/**
+ * Per-item reputation-grant summary. Covers positive grants only — negative
+ * grants (app deductions) are invisible on every public read surface.
+ */
+export interface GrantSummary {
+    /** Sum of positive grant amounts on the item. */
+    total: number;
+    /** Number of positive grants on the item. */
+    count: number;
+    /** The calling user's own summed positive grants on the item. */
+    viewerTotal: number;
+}
+/**
+ * A single reputation movement. Rows are append-only — nothing updates or
+ * soft-deletes them — so the table is the audit log behind every balance.
+ */
+export interface ReputationGrant {
+    id: string;
+    sourceType: ReputationGrantSourceType;
+    /** Null for an app mint, and for a transfer whose sender was deleted. */
+    senderId: string | null;
+    /** Populated when the list is called with `include: "user"`. */
+    sender?: User | null;
+    recipientId: string;
+    /** Populated when the list is called with `include: "user"`. */
+    recipient?: User | null;
+    /** Non-zero. Negative only when `sourceType` is `"app"`. */
+    amount: number;
+    /** The bucket both legs moved in; null = the project-general bucket. */
+    spaceId: string | null;
+    /** Both null or both non-null. */
+    targetType: ReputationGrantTargetType | null;
+    targetId: string | null;
+    note: string | null;
+    metadata: Record<string, any> | null;
+    createdAt: string;
+    updatedAt: string;
+}